DESCRIPTION
This optional file controls the color to be associated to the context components associated to the raw context passed by selinux_raw_context_to_color(3), when context related information is to be displayed in color by an SELinux-aware application.selinux_raw_context_to_color(3) obtains this color information from the active policy secolor.conf file as returned by selinux_colors_path(3).
FILE FORMAT
The file format is as follows:-
color
color_name
= #color_mask
[...]context_component string = fg_color_name bg_color_name
[...]
Where:
color
- The color keyword. Each color entry is on a new line.
- A single word name for the color (e.g. red).
- A color mask starting with a hash (#) that describes the hexadecimal RGB colors with black being #000000 and white being #ffffff.
-
The context component name that must be one of the following:
- user, role, type or range
-
This is the
context_component
string that will be matched with the
raw
context component passed by
selinux_raw_context_to_color(3).
A wildcard '*' may be used to match any undefined string for the user, role and type context_component entries only.
fg_color_name
- The color_name string that will be used as the foreground color. A color_mask may also be used.
- The color_name string that will be used as the background color. A color_mask may also be used.
EXAMPLES
Example 1 entries are:-
color black = #000000
color green = #008000
color yellow = #ffff00
color blue = #0000ff
color white = #ffffff
color red = #ff0000
color orange = #ffa500
color tan = #D2B48Cuser * = black white
role * = white black
type * = tan orange
range s0-s0:c0.c1023 = black green
range s1-s1:c0.c1023 = white green
range s3-s3:c0.c1023 = black tan
range s5-s5:c0.c1023 = white blue
range s7-s7:c0.c1023 = black red
range s9-s9:c0.c1023 = black orange
range s15:c0.c1023 = black yellow
Example 2 entries are:
-
color black = #000000
color green = #008000
color yellow = #ffff00
color blue = #0000ff
color white = #ffffff
color red = #ff0000
color orange = #ffa500
color tan = #d2b48cuser unconfined_u = #ff0000 green
role unconfined_r = red #ffffff
type unconfined_t = red orange
user user_u = black green
role user_r = white black
type user_t = tan red
user xguest_u = black yellow
role xguest_r = black red
type xguest_t = black green
user sysadm_u = white black
range s0:c0.c1023 = black white
user * = black white
role * = black white
type * = black white